CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-11 19:52:51 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update to FleetDM 4.5

Browse Source
This commit is contained in:
Josh Brower
2021-11-08 15:05:58 -05:00
parent 2561480371
commit 083d467aa9
2 changed files with 46 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
salt/fleet/files/packs/osquery-config.conf
View File

@@ -1,6 +1,9 @@
---
apiVersion: v1 apiVersion: v1
kind: options kind: config
spec: spec:
server_settings:
enable_analytics: true
config: config:
decorators: decorators:
always: always:

28
salt/fleet/init.sls
View File

@@ -114,20 +114,20 @@ so-fleet:
- port_bindings: - port_bindings:
- 0.0.0.0:8080:8080 - 0.0.0.0:8080:8080
- environment: - environment:
- KOLIDE_MYSQL_ADDRESS={{ MAINIP }}:3306 - FLEET_MYSQL_ADDRESS={{ MAINIP }}:3306
- KOLIDE_REDIS_ADDRESS={{ MAINIP }}:6379 - FLEET_REDIS_ADDRESS={{ MAINIP }}:6379
- KOLIDE_MYSQL_DATABASE=fleet - FLEET_MYSQL_DATABASE=fleet
- KOLIDE_MYSQL_USERNAME=fleetdbuser - FLEET_MYSQL_USERNAME=fleetdbuser
- KOLIDE_MYSQL_PASSWORD={{ FLEETPASS }} - FLEET_MYSQL_PASSWORD={{ FLEETPASS }}
- KOLIDE_SERVER_CERT=/ssl/server.cert - FLEET_SERVER_CERT=/ssl/server.cert
- KOLIDE_SERVER_KEY=/ssl/server.key - FLEET_SERVER_KEY=/ssl/server.key
- KOLIDE_LOGGING_JSON=true - FLEET_LOGGING_JSON=true
- KOLIDE_AUTH_JWT_KEY= {{ FLEETJWT }} - FLEET_AUTH_JWT_KEY= {{ FLEETJWT }}
- KOLIDE_OSQUERY_STATUS_LOG_FILE=/var/log/fleet/status.log - FLEET_OSQUERY_STATUS_LOG_FILE=/var/log/fleet/status.log
- KOLIDE_OSQUERY_RESULT_LOG_FILE=/var/log/osquery/result.log - FLEET_OSQUERY_RESULT_LOG_FILE=/var/log/osquery/result.log
- KOLIDE_SERVER_URL_PREFIX=/fleet - FLEET_SERVER_URL_PREFIX=/fleet
- KOLIDE_FILESYSTEM_ENABLE_LOG_ROTATION=true - FLEET_FILESYSTEM_ENABLE_LOG_ROTATION=true
- KOLIDE_FILESYSTEM_ENABLE_LOG_COMPRESSION=true - FLEET_FILESYSTEM_ENABLE_LOG_COMPRESSION=true
- binds: - binds:
- /etc/pki/fleet.key:/ssl/server.key:ro - /etc/pki/fleet.key:/ssl/server.key:ro
- /etc/pki/fleet.crt:/ssl/server.cert:ro - /etc/pki/fleet.crt:/ssl/server.cert:ro